Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212071.roa
File: AS212071.roa (raw, json)
Hash identifier: SKB7wbKBKvAjU0krrVcoP2rQVoA0BKENeE8DiiyguAk=
Subject key identifier: 28:1B:2C:56:65:6C:AB:CC:16:1E:A6:CA:C4:1D:F7:79:6F:67:51:1B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 44921B28C1D462136CA86BA8B7BAE804104A7909
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212071.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 212071
IP address blocks: 2a06:a005:12e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:92:1b:28:c1:d4:62:13:6c:a8:6b:a8:b7:ba:e8:04:10:4a:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=281B2C56656CABCC161EA6CAC41DF7796F67511B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:21:47:1f:16:e4:91:4a:1e:5c:ac:35:c2:
c7:4f:1e:17:38:89:88:11:ac:12:93:11:d0:7f:00:
6e:6d:58:bc:be:5e:d2:ce:e2:3f:1e:22:c8:c2:72:
0b:aa:f5:66:af:b1:aa:d0:f8:a8:3e:60:31:a1:66:
4d:47:27:70:36:e8:d6:0a:ec:2c:96:d6:c8:ff:d5:
7d:dc:03:35:b5:62:68:9a:42:93:02:d5:86:d6:be:
ae:d3:ff:80:4d:b3:94:fd:3b:82:9d:61:11:2e:1b:
7d:2e:81:10:09:b6:ea:be:dd:f2:95:4c:de:56:94:
66:a0:cc:d3:8b:20:9f:86:72:66:df:2d:11:c5:d8:
32:08:f4:79:86:52:1a:f6:8f:e9:25:6d:60:11:22:
5c:79:37:42:40:f4:78:c3:0a:2f:6d:08:fa:25:a7:
5e:ca:52:6d:c7:3e:aa:33:ab:22:28:0f:59:52:b5:
56:e6:f5:63:48:63:b1:a2:0e:c3:51:f4:a7:99:e7:
e6:77:ef:77:23:93:7b:62:b6:fd:47:38:d9:b2:ea:
97:71:08:b2:14:52:5f:15:ab:11:ec:44:cf:56:68:
4d:e1:24:14:f2:a7:d0:5e:01:3f:f5:2b:ed:08:78:
e0:2a:95:08:55:75:68:11:b4:89:68:26:f6:36:f8:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1B:2C:56:65:6C:AB:CC:16:1E:A6:CA:C4:1D:F7:79:6F:67:51:1B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:12e0::/44
Signature Algorithm: sha256WithRSAEncryption
3f:ee:9d:4e:1a:c6:91:9b:ac:84:18:36:0d:83:0d:7c:d0:3d:
de:f4:09:59:0c:5b:8f:b6:1e:23:3b:9b:93:d1:95:4d:0b:19:
4d:ba:05:10:70:f3:b7:8c:26:ae:92:7c:15:5c:9a:58:bd:9b:
7e:4f:ac:fc:b3:a1:0d:35:4e:15:d9:e6:50:a7:03:44:b1:ac:
4e:e8:2b:8c:b5:65:b5:85:36:1d:95:79:4c:c8:71:79:93:d7:
ae:04:17:ec:a2:12:e5:12:f8:5c:d7:42:4a:24:b0:19:28:fa:
db:0e:69:eb:0a:3b:0a:57:0b:a1:0a:0d:b5:2a:83:19:00:cd:
6b:db:2e:75:6c:84:7e:ff:d5:bd:0a:23:fb:3e:cd:e4:77:70:
22:c7:6d:57:79:2f:e1:0e:e3:bd:2a:1e:d5:8a:98:59:b3:11:
e1:cc:cf:9d:e1:d4:92:5c:a7:46:26:bb:52:42:e3:f6:14:ff:
d3:d2:24:00:82:d9:c8:0f:65:b1:cc:a7:6b:91:47:da:e1:17:
5a:b5:76:c0:4a:38:1d:b5:1c:ac:cf:6b:6e:95:4f:c9:f1:89:
70:2d:0b:f4:e5:40:0f:0c:19:36:0c:4e:43:e0:d6:8a:91:40:
9d:ed:d0:a8:99:9c:26:f4:a9:24:22:d8:f7:95:b5:6c:8e:62:
6e:d3:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:39 2025 by rpki-client